Compliance reports

10 reports belong to the Compliance area. An API or MCP client sees them when it holds a grant for this area. Kind: a findings list rates each row by severity; a table lists objects. Data: Cached opens at once, On demand reads Microsoft 365 when first opened, Scan runs on request.

Entra ID › Identity Governance & Lifecycle

Report	The question it answers	Kind	Data
Data Subject Requests Due (Priva)	Which data subject requests are open, how many days are left until they are due, and which are stuck?	Findings list · dashboard tile	On demand
Microsoft 365 Backup Coverage	Which mailboxes, OneDrives and sites are protected by Microsoft 365 Backup, and which departments are not covered?	Findings list · dashboard tile	On demand

Exchange Online › Mail Security Posture

Report	The question it answers	Kind	Data
Audit Readiness	Is the unified audit log recording, is mailbox auditing on, and which mailboxes are exempt from auditing?	Findings list · dashboard tile	On demand, PowerShell

SharePoint Online › Sharing & Governance

Report	The question it answers	Kind	Data
Sensitivity Label Coverage of Groups & Sites	Which teams, Microsoft 365 groups and SharePoint sites have no sensitivity label, and which labels are in use?	Table · dashboard tile	On demand, PowerShell

Tenant

Report	The question it answers	Kind	Data
Open eDiscovery Cases & Legal Holds	Which open eDiscovery cases keep legal holds active although nobody has touched them for months?	Table	Cached

Tenant › Compliance & Audit

Report	The question it answers	Kind	Data
Admin Actions Outside Business Hours (7 days)	Which Exchange or Entra admin actions did people take outside business hours in the last 7 days?	Table · dashboard tile	Scan
DLP Policy Inventory	Which DLP policies exist, which workloads do they cover, and which of them actually block anything?	Table · dashboard tile	On demand, PowerShell
Litigation Hold & Retention Coverage	Which mailboxes and locations are covered by no retention policy and no hold?	Table · dashboard tile	On demand, PowerShell
Mass Download & Deletion Activity (7 days)	Who downloaded or deleted an unusual number of SharePoint and OneDrive files in one hour in the last 7 days?	Table · dashboard tile	Scan
Sensitivity Label & Auto-labelling Policies	Which sensitivity labels are published, is labelling mandatory or defaulted, and are auto-labelling policies enforcing?	Findings list · dashboard tile	On demand, PowerShell